System for dynamic network reconfiguration and quarantine in response to threat conditions

Abstract

A method, apparatus, and computer instructions for responding to a threat condition within the network data processing system. A threat condition within the network data processing system is detected. At least one routing device is dynamically reconfigured within the network data processing system to isolate or segregate one or more infected data processing systems within the network data processing system. This dynamic reconfiguration occurs in response to the threat condition being detected.

Description

BACKGROUND OF THE INVENTION [0001] 1. Technical Field [0002] The present invention relates generally to an improved data processing system and in particular to a method and apparatus for processing data. Still more particularly, the present invention relates to a method, apparatus, and computer instructions for responding to threat conditions. [0003] 2. Description of Related Art [0004] Computers and computer networks are vulnerable to threats. These threats include, for example, viruses, worms, and Trojan horses. A virus is a small piece of software that may piggyback itself on a real program. For example, a virus may attach itself to a spreadsheet program. Each time the spreadsheet program is run, the virus also runs and may spread and cause mischief or damage. A worm is a small piece of software that exploits computer networks and security holes to replicate itself and spread. A Trojan horse is a computer program that may claim to perform one function, but performs another, such ...

AI Technical Summary

Benefits of technology

[0007] The present invention provides a method, apparatus, and computer instructions for responding to a threat condition within the network data processing system. A threat condition within the network data processing system is detected. At least one routing device i

Problems solved by technology

Computers and computer networks are vulnerable to threats.

Each time the spreadsheet program is run, the virus also runs and may spread and cause mischief or damage.

If more systems are infected or if the infection is a particularly virulent form of a worm, the threat condition is considered to be high.

All of these methods are labor intensive and do not affect collections of data processing systems.

Further, these methods do not result in any intellige

Images